gan-style-harness
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface identified in the described multi-agent architecture.\n
- Ingestion points: The 'Evaluator Agent' uses Playwright to interact with and read data from a live application (runtime data from a developer-built environment), which constitutes a vector for untrusted external content.\n
- Boundary markers: The instructions do not specify the use of delimiters, escaping, or 'ignore instructions' markers when the Generator reads feedback files (
feedback-NNN.md) produced by the Evaluator.\n - Capability inventory: The harness provides agents with powerful tools including
Bash,Write,Edit, andTask, which could be exploited if an agent obeys malicious instructions embedded in the application data.\n - Sanitization: No sanitization or validation of the live application's content or the Evaluator's feedback is mentioned in the workflow design.
Audit Metadata